• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2011, Vol. 33 ›› Issue (7): 1-5.

• 论文 •    下一篇

KSEFS:支持加密共享的服务器加密文件系统

何连跃,廖湘科,付松龄,唐晓东,邓科峰   

  1. (国防科学技术大学计算机学院,湖南 长沙 410073)
  • 收稿日期:2009-07-24 修回日期:2009-11-05 出版日期:2011-07-21 发布日期:2011-07-25
  • 作者简介:何连跃(1971),男,浙江武义人,博士,副研究员,研究方向为系统软件和信息安全。
  • 基金资助:

    国家863计划资助项目(2007AA01Z408)

KSEFS:A ServerOriented Encrypted File System Supporting Cypertext Sharing

HE Lianyue,LIAO Xiangke,FU Songling,TANG Xiaodong,DENG Kefeng   

  1. (School of Computer Science,National University of Defense Technology,Changsha 410073,China)
  • Received:2009-07-24 Revised:2009-11-05 Online:2011-07-21 Published:2011-07-25

摘要:

针对电子数据的存储安全和交换安全问题,本文提出了加密共享保险箱技术。加密共享保险箱是网络用户在服务器上的基本加密存储实体,除了提供透明加解密功能外,能够灵活实现网络用户间的数据加密共享功能。在加密共享保险箱技术基础上,本文给出了麒麟服务器加密文件系统(KSEFS)的系统结构。最后对KSEFS进行了性能测试,结果表明KSEFS提供的加密文件服务性能与普通文件服务相比,性能只降低3%~18%。

关键词: 加密文件系统, 加密共享保险箱, 麒麟服务器加密文件系统, KSEFS

Abstract:

To solve the security problem in electronic data storage and exchange, this paper presents the technology of Encrypting Share Box (ESB). ESB is the basic encryption entity on the server, which can not only provide transparent data encryption storage, but also support a flexible encrypting data sharing among users. We also put forward a software architecture for the Kylin Serveroriented Encrypting File System (KSEFS). At the end of the paper, we evaluate the file system, and the results show that, compared with the normal file services, the performance is reduced only by 3% to 18%.

Key words: file system;encrypting share box;Kylin serveroriented encrypted file system;KSEFS